agenttesla | 8fadb4f26f66b5d6892f6fec0165feb246165af1d43f1a87881169c716da742e | Triage

Submit
Reports

Overview

overview

Static

static

Request_00...79.exe

windows7_x64

Request_00...79.exe

windows10_x64

Sharing

General

Target

Request_009_887_112_998_777_879.exe
Size

430KB
Sample

211020-psb9xshhgq
MD5

38fbd4445e816126a0c9e89c7599db66
SHA1

7afc72c4b8d115584fa414db680a5bab59800874
SHA256

8fadb4f26f66b5d6892f6fec0165feb246165af1d43f1a87881169c716da742e
SHA512

b6b3128315217e5f9f9ce11b2efc4807b087c03618ebc78e721722d1cbf8b18a4ff35697c003c09ce6fea8db4b099b4f54b8036eb084a0cb49ce1d2c96e4170a

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Request_009_887_112_998_777_879.exe

Resource

win7-en-20210920

agenttesla collection keylogger spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Request_009_887_112_998_777_879.exe

Resource

win10-en-20211014

agenttesla collection keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.medtec-germany.com
Port:
587
Username:
[email protected]
Password:
vfPjbzH2

Targets

- Target
  
  Request_009_887_112_998_777_879.exe
- Size
  
  430KB
- MD5
  
  38fbd4445e816126a0c9e89c7599db66
- SHA1
  
  7afc72c4b8d115584fa414db680a5bab59800874
- SHA256
  
  8fadb4f26f66b5d6892f6fec0165feb246165af1d43f1a87881169c716da742e
- SHA512
  
  b6b3128315217e5f9f9ce11b2efc4807b087c03618ebc78e721722d1cbf8b18a4ff35697c003c09ce6fea8db4b099b4f54b8036eb084a0cb49ce1d2c96e4170a
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy